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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- tf the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to communication(s) filed on 11 October 2001 . 
2a)D This action is FINAL. 2b)(3 This action is non-finaL 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
Disposition of Claims 

4) K Claim(s) 1-34 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 1-34 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) S The specification is objected to by the Examiner. 

10) S The drawing(s) filed on 11 October 2001 is/are: a)S accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

11) D The proposed drawing correction filed on is: a)Q approved b)Q disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

13) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a)DAII b)D Some*c)D None of: 

1 -D Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 119(e) (to a provisional application). 

a) □ The translation of the foreign language provisional application has been received. 

15) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121. 

Attachment(s) 

1) ^ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) Paper No(s). . 

2) CI Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) Notice of Informal Patent Application (PTO-152) 

3) ^ Information Disclosure Statement(s) (PTO-1449) Paper No(s) see att . 6) Q Other: 
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DETAILED ACTION 

1. Pursuant to USC 131, claims 1-34 are presented for examination. 

Specification 

2. The disclosure is objected to because of the following informalities: on page 7, line 8, 
reference number "118" should be —18-. Appropriate correction is required. Applicant's 
cooperation is requested in correcting any similar errors of which applicant may become aware 
in the specification. 

Claim Objections 

3. Claims 32-33 are objected to because of the following informalities: in order to avoid 
rendering the claim indefinite, the phrase "decryption engine is further adapted to encrypt " 
should read -decrypt-. Appropriate correction is required. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject matter 
sought to be patented and the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
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which said subject matter pertains. Patentability shall not be negatived by the manner in which 
the invention was made. 

4. 1 Claims 1-34 are rejected under 35 U.S.C. 103(a) as being unpatentable over US Patent 
5,757,915 to Aucsmith et al in view of US Patent Publication US 2002/0094085 to Roberts. 

4 2 As per claims 1-2, 4, 8, 12, 14-15, 19, 22-25, 28, 31-33, Aucsmith et al substantially 
teaches a system for secure data transmission, comprising the following modules and parts 
(column 8, lines 1-40 and figures 2, 4, and 5): a processor and a memory coupled to the 
processor (column 8, lines 1-10 and figure 5); encryption/decryption modules (fig. 2, 4, and 5) 
comprising an encryption engine stored in the memory and executable by the processor, the 
encryption engine adapted to encrypt the data using the hash key (column 8, lines 1-40 and 
column 5, line 65 though column 6, line 7); and wherein the processor is adapted to transmit the 
encrypted data, an identification key related to the private key, and the character string to a 
recipient (column 5, line 65 though column 6, line 7 and column 6, lines 39-52), and further 
discloses generation module and signature generator units stored in the memory and executable 
by the processor that meet the recitation of string generator and hashing engine, for performing 
cryptographic key hashed functions and generating cryptographic key hashed values (column 5). 
Aucsmith et al further discloses any cryptographic method for generating hash key (column 5, 
lines 5-32). Aucsmith et al discloses generating keyed hash value for encrypting the data but 
does not explicitly disclose generating a hash key using the character string and a private key 
wherein the character string is randomly generated. However, Roberts in an analogous art 
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teaches a method and system for generating encryption keys using random bit generators. 
Roberts discloses transmitting a random seed that meets the recitation of a character string to a 
recipient (page 2, paragraph 0022) and further discloses a master key is used along with a 
random bit sequence called a seed into a one-way hash algorithm to generate an 
encryption/decryption key (page 1, paragraphs 008-0010 and page 4, paragraphs0040-0043) that 
meets the recitation of a hash engine adapted to hash the character string and a private key to 
generate a hash key used for encryption and decryption. The advantage is that changing the seed 
periodically also changes the key periodically, thus even if an eavesdropper manages to identify 
the key, and the eavesdropper will only have access to the secure communications until the key 
is changed. Therefore, it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to modify the method of key generation of Aucsmith et al to integrate 
the concept of generating encryption/decryption keys by hashing a random seed with a private 
key as taught by Roberts to make it more difficult for eavesdroppers to identify the key (page 1, 
paragraphs 008-0010). The motivation to do so is given by Roberts who teaches that changing 
the seed periodically also changes the key periodically, thus even if an eavesdropper manages to 
identify the key, and the eavesdropper will only have access to the secure communications until 
the key is changed; this method makes it more difficult for eavesdroppers to identify the key 
(page 1, paragraphs 008-0010). 

As per claims 3, 20, and 29, the combination of Aucsmith et al and Roberts discloses 
the limitation of comprising a signature engine stored in the memory and executable by the 
processor, the signature engine adapted to generate a signature using the hash key and the data, 
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the processor farther adapted to transmit the signature to the recipient (Aucsmith et al, column 
5, line 59 through column 6, line 7; and column 6, line 53 through column 7, line 10). 

As per claim 21, the combination of Aucsmith et ai and Roberts discloses the limitation 
of wherein the recipient is adapted to decrypt the encrypted data and verify the signature using 
the decrypted data (Aucsmith et al, column 8, line 52 through column 9, line 18). 

As per claims 6, 13, and 26, the combination of Aucsmith et al and Roberts discloses 
the limitation of wherein the recipient is adapted to access a relational database associating the 
identification key with the private key (Aucsmith et al, column 7, lines 29-50) and decrypt the 
encrypted data using the private key and the character string (Roberts, page 1, paragraph 001 1). 
Therefore, these claims are rejected on the same rationale as the rejection of claims 1 and 19. 

Claim 27 contains the same limitations as claims 19 and 26 and therefore is rejected on 
the same rationale as the rejection of claims 19 and 26. 

As per claims 16, 17, 30, the combination of Aucsmith et al and Roberts discloses a 
hashing engine stored in the memory and executable by the processor, the hashing engine 
adapted to generate a hash key using the private key and the character string as discussed in 
claims 1 and 19 above; and a signature engine stored in the memory and executable by the 
processor, the signature engine adapted to verify a signature received from the sender using the 
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hash key and the decrypted data (Aucsmith et al, column 8, line 52 through column 9, line 18), 
Therefore, these claims are rejected on the same rationale as the rejection of claims 1 and 19. 

As per claims 5, 7, 9-11, 18, and 34, the combination of Aucsmith et al and Roberts 

discloses the limitation of generating a signature using the hash key and the data; transmitting the 
signature to the recipient (Aucsmith et al, column 5, line 59 through column 6, line 7; and 
column 6, line 53 through column 7, line 10); determining the private key at the recipient using 
the identification key (Aucsmith et al, column 7, lines 29-50); determining the hash key at the 
recipient using the private key and the character string (Roberts, page 1, paragraph 001 1 and 
page 2, paragraph 0022); decrypting the encrypted data at the recipient using the hash key 
(Roberts, page 1, paragraph 001 1); and verifying the signature at the recipient using the hash 
key and the decrypted data (Aucsmith et al, column 8, line 52 through column 9, line 18). 
Therefore, these claims are rejected on the same rationale as the rejection of claims 1 and 19. 

Conclusion 

5. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure as the art discloses secure data communications using hashing, signature, encryption 
message authentication and verification. 
US Patent Publication: US 2001/0002929 Mache 

US Patents: 6,058,188 Chandersekaran et al ; 5,689,567 Miyauchi ; 5,987,133 Aisaka ; 
5,701,343 Takashima et al. 
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5. 1 Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carl Colin whose telephone number is 571-272-3862. The 
examiner can normally be reached on Monday through Thursday, 8:00-6:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

. Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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